Device code phishing targets 340+ Microsoft 365 orgs since Feb 2026 via OAuth abuse, enabling persistent token hijacking and ...

Come along with me on a journey as we delve into the swirling, echoing madness of identity attacks. Today, I present a case study on how different implementations of OAuth 2.0, the core authentication ...

Just as we think we’re getting one step ahead of cybercriminals, they find a new way to evade our defenses. The latest method causing trouble for security teams is that of device code phishing, a ...

After you enter the code and authenticate, the device is automatically linked to your account without ever handling your password directly. To conduct a device-code phishing attack, threat actors need ...

Google may introduce more automatic enrollments for its Find My Device network. Location access and device location syncing could trigger automatic enrollment. Strings also suggest that Google would ...

We’ve got our hands on the biggest set of trackers for Android’s Find My Device network from Pebblebee, and unlike others, they include chargers and accessories right in the box. What’s in the box ...